add another convenience wrapper
also find Insecure if query yields no RRSIGs